Unrated severityNVD Advisory· Published Nov 5, 2026

CVE-2026-105325

Description

Missing check for ACCOUNTING_UPDATE / ACCOUNTING_CREATE in accounting in allows user with only ACCOUNTING_VIEW permission to update/create PaymentApplication.

Affected versions before : 24.09.08

Users are recommended to upgrade to version 24.09.08 which fixes this issue.

Affected products

Apache/PaymentApplicationllm-create
Range: <24.09.08

Patches

Vulnerability mechanics

References

lists.apache.org/thread.html/7b2syzksp7klt9fvhdg0olldvs2g83lznvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000